TheArtOfService
Back to Frameworks

Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

Self-Assess
Global (VDA QMC; automotive OEMs and their suppliers, intacs assessment scheme)
v4.1 (VDA QMC WG13, released 2026-08-24; revises 4.0 of 2023-10-20)
12 domains
229 controls

Automotive SPICE is the VDA Quality Management Center's process reference and assessment model for automotive system, software, hardware and machine learning engineering, built on the ISO/IEC 33020 measurement framework and assessed by intacs certified assessors. Version 4.1 (released 24 August 2026) revises 4.0 (2023) by removing MLE.2 BP5 with editorial changes. The graph models the 195 base practices of the 32 processes across 11 process groups and the 34 generic practices of the nine process attributes that carry capability levels 1 to 5.

Verified

Automotive SPICE (ASPICE) v4.1 - Process Assessment Model is a compliance framework from Global (VDA QMC; automotive OEMs and their suppliers, intacs assessment scheme) with 12 domains and 229 controls that map to 196 other frameworks. The largest domains are Capability levels and process attributes (PA 1.1 to PA 5.2) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model (34 controls), Supporting process group (SUP) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model (34 controls), Software engineering process group (SWE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model (33 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (12)

Acquisition process group (ACQ) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

5 controls
Controls in the Acquisition process group (ACQ) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 5 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::ACQ.4.BP1ACQ.4.BP1 Agree on and maintain joint activities, joint interfaces, and information to be exchanged
automotive-spice-aspice-v4-1-process-assessment-model::ACQ.4.BP2ACQ.4.BP2 Exchange all agreed information
automotive-spice-aspice-v4-1-process-assessment-model::ACQ.4.BP3ACQ.4.BP3 Review development work products with the supplier
automotive-spice-aspice-v4-1-process-assessment-model::ACQ.4.BP4ACQ.4.BP4 Review progress of the supplier
automotive-spice-aspice-v4-1-process-assessment-model::ACQ.4.BP5ACQ.4.BP5 Act to correct the deviations

Capability levels and process attributes (PA 1.1 to PA 5.2) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

34 controls
Controls in the Capability levels and process attributes (PA 1.1 to PA 5.2) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 34 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::GP 1.1.1GP 1.1.1 Achieve the process outcomes Achieve the intent of the base practices
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.1.1GP 2.1.1 Identify the objectives and define a strategy for the performance of the process
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.1.2GP 2.1.2 Plan the performance of the process
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.1.3GP 2.1.3 Determine the resource needs
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.1.4GP 2.1.4 Identify and make available the resources
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.1.5GP 2.1.5 Monitor and adjust the performance of the process
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.1.6GP 2.1.6 Manage the interfaces between involved parties
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.2.1GP 2.2.1 Define the requirements for the work products
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.2.2GP 2.2.2 Define the requirements for storage and control of the work products
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.2.3GP 2.2.3 Identify, store and control the work products
automotive-spice-aspice-v4-1-process-assessment-model::GP 2.2.4GP 2.2.4 Review and adjust work products
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.1.1GP 3.1.1 Establish and maintain the standard process
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.1.2GP 3.1.2 Determine the required competencies
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.1.3GP 3.1.3 Determine the required resources
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.1.4GP 3.1.4 Determine suitable methods to monitor the standard process
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.2.1GP 3.2.1 Deploy a defined process that satisfies the context specific requirements of the use of the standard process
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.2.2GP 3.2.2 Ensure the required competencies for the defined roles
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.2.3GP 3.2.3 Ensure the required resources to support the performance of the defined process
automotive-spice-aspice-v4-1-process-assessment-model::GP 3.2.4GP 3.2.4 Monitor the performance of the defined process
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.1.1GP 4.1.1 Identify the business goals
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.1.2GP 4.1.2 Establish the process information needs
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.1.3GP 4.1.3 Identify the measurable relationships between process elements
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.1.4GP 4.1.4 Derive a process measurement approach and select the analysis techniques
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.1.5GP 4.1.5 Establish quantitative control limits
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.1.6GP 4.1.6 Collect product and process measurement results through performing the defined process
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.2.1GP 4.2.1 Identify the variations in process performance
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.2.2GP 4.2.2 Identify the causes of variation
automotive-spice-aspice-v4-1-process-assessment-model::GP 4.2.3GP 4.2.3 Identify and implement corrective actions to address assignable causes
automotive-spice-aspice-v4-1-process-assessment-model::GP 5.1.1GP 5.1.1 Define the process innovation objectives for the process that support the relevant business goals
automotive-spice-aspice-v4-1-process-assessment-model::GP 5.1.2GP 5.1.2 Analyze the quantitative data of the process
automotive-spice-aspice-v4-1-process-assessment-model::GP 5.1.3GP 5.1.3 Identify the innovation opportunities
automotive-spice-aspice-v4-1-process-assessment-model::GP 5.2.1GP 5.2.1 Define and assess the impact of the proposed changes
automotive-spice-aspice-v4-1-process-assessment-model::GP 5.2.2GP 5.2.2 Implement the agreed process changes
automotive-spice-aspice-v4-1-process-assessment-model::GP 5.2.3GP 5.2.3 Evaluate the effectiveness of the process changes

Hardware engineering process group (HWE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

24 controls
Controls in the Hardware engineering process group (HWE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 24 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::HWE.1.BP1HWE.1.BP1 Specify the hardware requirements
automotive-spice-aspice-v4-1-process-assessment-model::HWE.1.BP2HWE.1.BP2 Structure the hardware requirements
automotive-spice-aspice-v4-1-process-assessment-model::HWE.1.BP3HWE.1.BP3 Analyze the hardware requirements
automotive-spice-aspice-v4-1-process-assessment-model::HWE.1.BP4HWE.1.BP4 Analyze the impact on the operating environment
automotive-spice-aspice-v4-1-process-assessment-model::HWE.1.BP5HWE.1.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::HWE.1.BP6HWE.1.BP6 Communicate the agreed hardware requirements and the impact on the operating environment
automotive-spice-aspice-v4-1-process-assessment-model::HWE.2.BP1HWE.2.BP1 Specify the hardware architecture
automotive-spice-aspice-v4-1-process-assessment-model::HWE.2.BP2HWE.2.BP2 Specify the hardware detailed design
automotive-spice-aspice-v4-1-process-assessment-model::HWE.2.BP3HWE.2.BP3 Specify the dynamic aspects of the hardware architecture and the hardware detailed design
automotive-spice-aspice-v4-1-process-assessment-model::HWE.2.BP4HWE.2.BP4 Analyze the hardware architecture and the hardware detailed design
automotive-spice-aspice-v4-1-process-assessment-model::HWE.2.BP5HWE.2.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::HWE.2.BP6HWE.2.BP6 Communicate the agreed hardware architecture and hardware detailed design
automotive-spice-aspice-v4-1-process-assessment-model::HWE.3.BP1HWE.3.BP1 Specify verification measures for the verification against the hardware design
automotive-spice-aspice-v4-1-process-assessment-model::HWE.3.BP2HWE.3.BP2 Ensure the use of compliant samples
automotive-spice-aspice-v4-1-process-assessment-model::HWE.3.BP3HWE.3.BP3 Select verification measures
automotive-spice-aspice-v4-1-process-assessment-model::HWE.3.BP4HWE.3.BP4 Verify against the hardware design
automotive-spice-aspice-v4-1-process-assessment-model::HWE.3.BP5HWE.3.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::HWE.3.BP6HWE.3.BP6 Summarize and communicate the results
automotive-spice-aspice-v4-1-process-assessment-model::HWE.4.BP1HWE.4.BP1 Specify verification measures for the verification against the hardware requirements
automotive-spice-aspice-v4-1-process-assessment-model::HWE.4.BP2HWE.4.BP2 Ensure the use of compliant samples
automotive-spice-aspice-v4-1-process-assessment-model::HWE.4.BP3HWE.4.BP3 Select verification measures
automotive-spice-aspice-v4-1-process-assessment-model::HWE.4.BP4HWE.4.BP4 Verify the compliant hardware samples
automotive-spice-aspice-v4-1-process-assessment-model::HWE.4.BP5HWE.4.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::HWE.4.BP6HWE.4.BP6 Summarize and communicate the results

Machine learning engineering process group (MLE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

24 controls
Controls in the Machine learning engineering process group (MLE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 24 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::MLE.1.BP1MLE.1.BP1 Specify the ML requirements
automotive-spice-aspice-v4-1-process-assessment-model::MLE.1.BP2MLE.1.BP2 Structure the ML requirements
automotive-spice-aspice-v4-1-process-assessment-model::MLE.1.BP3MLE.1.BP3 Analyze the ML requirements
automotive-spice-aspice-v4-1-process-assessment-model::MLE.1.BP4MLE.1.BP4 Analyze the impact on the ML operating environment
automotive-spice-aspice-v4-1-process-assessment-model::MLE.1.BP5MLE.1.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::MLE.1.BP6MLE.1.BP6 Communicate the agreed ML requirements and the impact on the operating environment
automotive-spice-aspice-v4-1-process-assessment-model::MLE.2.BP1MLE.2.BP1 Develop the ML architecture
automotive-spice-aspice-v4-1-process-assessment-model::MLE.2.BP2MLE.2.BP2 Determine the hyperparameter ranges and the initial values
automotive-spice-aspice-v4-1-process-assessment-model::MLE.2.BP3MLE.2.BP3 Analyze the ML architectural elements
automotive-spice-aspice-v4-1-process-assessment-model::MLE.2.BP4MLE.2.BP4 Define the interfaces of the ML architectural elements
automotive-spice-aspice-v4-1-process-assessment-model::MLE.2.BP5MLE.2.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::MLE.2.BP6MLE.2.BP6 Communicate the agreed ML architecture
automotive-spice-aspice-v4-1-process-assessment-model::MLE.3.BP1MLE.3.BP1 Specify the ML training and validation approach
automotive-spice-aspice-v4-1-process-assessment-model::MLE.3.BP2MLE.3.BP2 Create the ML training and validation data set
automotive-spice-aspice-v4-1-process-assessment-model::MLE.3.BP3MLE.3.BP3 Create and optimize the ML model
automotive-spice-aspice-v4-1-process-assessment-model::MLE.3.BP4MLE.3.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::MLE.3.BP5MLE.3.BP5 Summarize and communicate the agreed trained ML model
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP1MLE.4.BP1 Specify an ML test approach
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP2MLE.4.BP2 Create the ML test data set
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP3MLE.4.BP3 Test the trained ML model
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP4MLE.4.BP4 Derive the deployed ML model
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP5MLE.4.BP5 Test the deployed ML model
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP6MLE.4.BP6 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::MLE.4.BP7MLE.4.BP7 Summarize and communicate the results

Management process group (MAN) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

23 controls
Controls in the Management process group (MAN) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 23 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP1MAN.3.BP1 Define the scope of work
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP10MAN.3.BP10 Review and report the progress of the project
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP2MAN.3.BP2 Define the project lifecycle
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP3MAN.3.BP3 Evaluate the feasibility of the project
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP4MAN.3.BP4 Define and monitor the work packages
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP5MAN.3.BP5 Define and monitor the project estimates and resources
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP6MAN.3.BP6 Define and monitor the required skills, knowledge, and experience
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP7MAN.3.BP7 Define and monitor the project interfaces and agreed commitments
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP8MAN.3.BP8 Define and monitor the project schedule
automotive-spice-aspice-v4-1-process-assessment-model::MAN.3.BP9MAN.3.BP9 Ensure consistency
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP1MAN.5.BP1 Identify sources of risks
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP2MAN.5.BP2 Identify the potential undesirable events
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP3MAN.5.BP3 Determine the risks
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP4MAN.5.BP4 Define risk treatment options
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP5MAN.5.BP5 Define and perform risk treatment activities
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP6MAN.5.BP6 Monitor the risks
automotive-spice-aspice-v4-1-process-assessment-model::MAN.5.BP7MAN.5.BP7 Take corrective action
automotive-spice-aspice-v4-1-process-assessment-model::MAN.6.BP1MAN.6.BP1 Identify the information needs
automotive-spice-aspice-v4-1-process-assessment-model::MAN.6.BP2MAN.6.BP2 Specify metrics
automotive-spice-aspice-v4-1-process-assessment-model::MAN.6.BP3MAN.6.BP3 Collect and store the metrics
automotive-spice-aspice-v4-1-process-assessment-model::MAN.6.BP4MAN.6.BP4 Analyze the collected metrics
automotive-spice-aspice-v4-1-process-assessment-model::MAN.6.BP5MAN.6.BP5 Communicate the analysis results
automotive-spice-aspice-v4-1-process-assessment-model::MAN.6.BP6MAN.6.BP6 Use metrics for decision-making

Process improvement process group (PIM) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

8 controls
Controls in the Process improvement process group (PIM) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 8 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP1PIM.3.BP1 Establish a commitment
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP2PIM.3.BP2 Identify improvement measures
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP3PIM.3.BP3 Establish process improvement goals
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP4PIM.3.BP4 Prioritize the improvements
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP5PIM.3.BP5 Define process improvement measures
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP6PIM.3.BP6 Implement the process improvement measures
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP7PIM.3.BP7 Confirm the process improvements
automotive-spice-aspice-v4-1-process-assessment-model::PIM.3.BP8PIM.3.BP8 Communicate the results of the improvements

Reuse process group (REU) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

6 controls
Controls in the Reuse process group (REU) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 6 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::REU.2.BP1REU.2.BP1 Select products for reuse
automotive-spice-aspice-v4-1-process-assessment-model::REU.2.BP2REU.2.BP2 Analyze the reuse capability of the products
automotive-spice-aspice-v4-1-process-assessment-model::REU.2.BP3REU.2.BP3 Define the limitations for reuse
automotive-spice-aspice-v4-1-process-assessment-model::REU.2.BP4REU.2.BP4 Ensure the qualification of the products for reuse
automotive-spice-aspice-v4-1-process-assessment-model::REU.2.BP5REU.2.BP5 Provide the products for reuse
automotive-spice-aspice-v4-1-process-assessment-model::REU.2.BP6REU.2.BP6 Communicate information about the effectiveness of the reuse activities

Software engineering process group (SWE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

33 controls
Controls in the Software engineering process group (SWE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 33 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::SWE.1.BP1SWE.1.BP1 Specify the software requirements
automotive-spice-aspice-v4-1-process-assessment-model::SWE.1.BP2SWE.1.BP2 Structure the software requirements
automotive-spice-aspice-v4-1-process-assessment-model::SWE.1.BP3SWE.1.BP3 Analyze the software requirements
automotive-spice-aspice-v4-1-process-assessment-model::SWE.1.BP4SWE.1.BP4 Analyze the impact on the operating environment
automotive-spice-aspice-v4-1-process-assessment-model::SWE.1.BP5SWE.1.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SWE.1.BP6SWE.1.BP6 Communicate the agreed software requirements and the impact on the operating environment
automotive-spice-aspice-v4-1-process-assessment-model::SWE.2.BP1SWE.2.BP1 Specify the static aspects of the software architecture
automotive-spice-aspice-v4-1-process-assessment-model::SWE.2.BP2SWE.2.BP2 Specify the dynamic aspects of the software architecture
automotive-spice-aspice-v4-1-process-assessment-model::SWE.2.BP3SWE.2.BP3 Analyze the software architecture
automotive-spice-aspice-v4-1-process-assessment-model::SWE.2.BP4SWE.2.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SWE.2.BP5SWE.2.BP5 Communicate the agreed software architecture
automotive-spice-aspice-v4-1-process-assessment-model::SWE.3.BP1SWE.3.BP1 Specify the static aspects of the detailed design
automotive-spice-aspice-v4-1-process-assessment-model::SWE.3.BP2SWE.3.BP2 Specify the dynamic aspects of the detailed design
automotive-spice-aspice-v4-1-process-assessment-model::SWE.3.BP3SWE.3.BP3 Develop the software units
automotive-spice-aspice-v4-1-process-assessment-model::SWE.3.BP4SWE.3.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SWE.3.BP5SWE.3.BP5 Communicate the agreed software detailed design and the developed software units
automotive-spice-aspice-v4-1-process-assessment-model::SWE.4.BP1SWE.4.BP1 Specify software unit verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SWE.4.BP2SWE.4.BP2 Select software unit verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SWE.4.BP3SWE.4.BP3 Verify the software units
automotive-spice-aspice-v4-1-process-assessment-model::SWE.4.BP4SWE.4.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SWE.4.BP5SWE.4.BP5 Summarize and communicate the results
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP1SWE.5.BP1 Specify software integration verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP2SWE.5.BP2 Specify verification measures for verifying the software component behavior
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP3SWE.5.BP3 Select verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP4SWE.5.BP4 Integrate the software elements and perform the integration verification
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP5SWE.5.BP5 Perform the software component verification
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP6SWE.5.BP6 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SWE.5.BP7SWE.5.BP7 Summarize and communicate the results
automotive-spice-aspice-v4-1-process-assessment-model::SWE.6.BP1SWE.6.BP1 Specify verification measures for the software verification
automotive-spice-aspice-v4-1-process-assessment-model::SWE.6.BP2SWE.6.BP2 Select verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SWE.6.BP3SWE.6.BP3 Verify the integrated software
automotive-spice-aspice-v4-1-process-assessment-model::SWE.6.BP4SWE.6.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SWE.6.BP5SWE.6.BP5 Summarize and communicate the results

Supply process group (SPL) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

8 controls
Controls in the Supply process group (SPL) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 8 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP1SPL.2.BP1 Define and agree the functional content of the releases
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP2SPL.2.BP2 Define the release package
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP3SPL.2.BP3 Ensure a unique identification of each release
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP4SPL.2.BP4 Build the release from items under configuration control
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP5SPL.2.BP5 Ensure the release approval before the delivery
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP6SPL.2.BP6 Provide a release note
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP7SPL.2.BP7 Communicate the type, service level and duration of support for each release
automotive-spice-aspice-v4-1-process-assessment-model::SPL.2.BP8SPL.2.BP8 Deliver the release package to the intended customer

Supporting process group (SUP) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

34 controls
Controls in the Supporting process group (SUP) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 34 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP1SUP.1.BP1 Ensure independence of quality assurance
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP2SUP.1.BP2 Define the criteria for quality assurance
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP3SUP.1.BP3 Assure quality of the work products
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP4SUP.1.BP4 Assure quality of the process activities
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP5SUP.1.BP5 Summarize and communicate quality assurance activities and results
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP6SUP.1.BP6 Ensure the resolution of non-conformances
automotive-spice-aspice-v4-1-process-assessment-model::SUP.1.BP7SUP.1.BP7 Escalate non-conformances
automotive-spice-aspice-v4-1-process-assessment-model::SUP.10.BP1SUP.10.BP1 Identify and record the change requests
automotive-spice-aspice-v4-1-process-assessment-model::SUP.10.BP2SUP.10.BP2 Analyze and assess the change requests
automotive-spice-aspice-v4-1-process-assessment-model::SUP.10.BP3SUP.10.BP3 Approve the change requests before implementation
automotive-spice-aspice-v4-1-process-assessment-model::SUP.10.BP4SUP.10.BP4 Establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SUP.10.BP5SUP.10.BP5 Confirm the implementation of the change requests
automotive-spice-aspice-v4-1-process-assessment-model::SUP.10.BP6SUP.10.BP6 Track the change requests to closure
automotive-spice-aspice-v4-1-process-assessment-model::SUP.11.BP1SUP.11.BP1 Establish an ML data management system
automotive-spice-aspice-v4-1-process-assessment-model::SUP.11.BP2SUP.11.BP2 Develop an ML data quality approach
automotive-spice-aspice-v4-1-process-assessment-model::SUP.11.BP3SUP.11.BP3 Collect the ML data
automotive-spice-aspice-v4-1-process-assessment-model::SUP.11.BP4SUP.11.BP4 Process the ML data
automotive-spice-aspice-v4-1-process-assessment-model::SUP.11.BP5SUP.11.BP5 Assure the quality of the ML data
automotive-spice-aspice-v4-1-process-assessment-model::SUP.11.BP6SUP.11.BP6 Communicate the agreed processed ML data
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP1SUP.8.BP1 Identify the configuration items
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP2SUP.8.BP2 Define the configuration item properties
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP3SUP.8.BP3 Establish the configuration management
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP4SUP.8.BP4 Control the modifications
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP5SUP.8.BP5 Establish baselines
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP6SUP.8.BP6 Summarize and communicate the configuration status
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP7SUP.8.BP7 Ensure completeness and consistency
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP8SUP.8.BP8 Verify the availability of backup and recovery mechanisms
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP1SUP.9.BP1 Identify and record the problems
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP2SUP.9.BP2 Determine the causes and the impacts of the problems
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP3SUP.9.BP3 Authorize urgent resolution actions
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP4SUP.9.BP4 Raise alert notifications
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP5SUP.9.BP5 Initiate problem resolution
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP6SUP.9.BP6 Track the problems to closure
automotive-spice-aspice-v4-1-process-assessment-model::SUP.9.BP7SUP.9.BP7 Report the status of problem resolution activities

System engineering process group (SYS) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

25 controls
Controls in the System engineering process group (SYS) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 25 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::SYS.1.BP1SYS.1.BP1 Identify stakeholders and obtain their expectations and requests
automotive-spice-aspice-v4-1-process-assessment-model::SYS.1.BP2SYS.1.BP2 Agree on the requirements
automotive-spice-aspice-v4-1-process-assessment-model::SYS.1.BP3SYS.1.BP3 Analyze the stakeholder requirements changes
automotive-spice-aspice-v4-1-process-assessment-model::SYS.1.BP4SYS.1.BP4 Communicate the requirements’ status
automotive-spice-aspice-v4-1-process-assessment-model::SYS.2.BP1SYS.2.BP1 Specify the system requirements
automotive-spice-aspice-v4-1-process-assessment-model::SYS.2.BP2SYS.2.BP2 Structure the system requirements
automotive-spice-aspice-v4-1-process-assessment-model::SYS.2.BP3SYS.2.BP3 Analyze the system requirements
automotive-spice-aspice-v4-1-process-assessment-model::SYS.2.BP4SYS.2.BP4 Analyze the impact on the system context
automotive-spice-aspice-v4-1-process-assessment-model::SYS.2.BP5SYS.2.BP5 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SYS.2.BP6SYS.2.BP6 Communicate the agreed system requirements and the impact on the system context
automotive-spice-aspice-v4-1-process-assessment-model::SYS.3.BP1SYS.3.BP1 Specify the static aspects of the system architecture
automotive-spice-aspice-v4-1-process-assessment-model::SYS.3.BP2SYS.3.BP2 Specify the dynamic aspects of the system architecture
automotive-spice-aspice-v4-1-process-assessment-model::SYS.3.BP3SYS.3.BP3 Analyze the system architecture
automotive-spice-aspice-v4-1-process-assessment-model::SYS.3.BP4SYS.3.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SYS.3.BP5SYS.3.BP5 Communicate the agreed system architecture
automotive-spice-aspice-v4-1-process-assessment-model::SYS.4.BP1SYS.4.BP1 Specify verification measures for the system integration
automotive-spice-aspice-v4-1-process-assessment-model::SYS.4.BP2SYS.4.BP2 Select verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SYS.4.BP3SYS.4.BP3 Integrate the system elements and perform the integration verification
automotive-spice-aspice-v4-1-process-assessment-model::SYS.4.BP4SYS.4.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SYS.4.BP5SYS.4.BP5 Summarize and communicate the results
automotive-spice-aspice-v4-1-process-assessment-model::SYS.5.BP1SYS.5.BP1 Specify verification measures for the system verification
automotive-spice-aspice-v4-1-process-assessment-model::SYS.5.BP2SYS.5.BP2 Select verification measures
automotive-spice-aspice-v4-1-process-assessment-model::SYS.5.BP3SYS.5.BP3 Perform the verification of the integrated system
automotive-spice-aspice-v4-1-process-assessment-model::SYS.5.BP4SYS.5.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::SYS.5.BP5SYS.5.BP5 Summarize and communicate the results

Validation process group (VAL) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model

5 controls
Controls in the Validation process group (VAL) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model domain of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model — 5 controls
CodeTitle
automotive-spice-aspice-v4-1-process-assessment-model::VAL.1.BP1VAL.1.BP1 Specify validation measures for the product validation
automotive-spice-aspice-v4-1-process-assessment-model::VAL.1.BP2VAL.1.BP2 Select validation measures
automotive-spice-aspice-v4-1-process-assessment-model::VAL.1.BP3VAL.1.BP3 Perform the validation and evaluate the results
automotive-spice-aspice-v4-1-process-assessment-model::VAL.1.BP4VAL.1.BP4 Ensure consistency and establish bidirectional traceability
automotive-spice-aspice-v4-1-process-assessment-model::VAL.1.BP5VAL.1.BP5 Summarize and communicate the results

Your Compliance Coverage

If you comply with Automotive SPICE (ASPICE) v4.1 - Process Assessment Model, you already cover:

ISO/IEC 23894:2023

2%

5 controls mapped

Compare →

WHO Global Strategy on Digital Health 2020-2025

2%

4 controls mapped

Compare →

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements

2%

4 controls mapped

Compare →

+ 193 more: Annex 11 to EU GMP - Computerised Systems (2%), South Korea ISMS-P (2%)

See all 196 mapped frameworks ↓

Maps to 196 other frameworks

260 total controls
ISO/IEC 23894:2023
5 source controls mapped|7 target controls covered
2%
WHO Global Strategy on Digital Health 2020-2025
4 source controls mapped|2 target controls covered
2%
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
4 source controls mapped|6 target controls covered
2%
Annex 11 to EU GMP - Computerised Systems
4 source controls mapped|3 target controls covered
2%
South Korea ISMS-P
4 source controls mapped|3 target controls covered
2%
NIST Cybersecurity Framework 2.0
4 source controls mapped|6 target controls covered
2%
UNESCO Recommendation on the Ethics of AI
3 source controls mapped|3 target controls covered
1%
UK AI Regulation Framework
3 source controls mapped|1 target controls covered
1%
Singapore AI Governance Framework
3 source controls mapped|2 target controls covered
1%
South Korea Korea Internet Self-Governance Organisation (KISO) Code of Ethics
3 source controls mapped|1 target controls covered
1%
RICS Professional Standards - Data and Technology in Property
3 source controls mapped|1 target controls covered
1%
UK Online Safety Act 2023
3 source controls mapped|1 target controls covered
1%
ICH Q10 - Pharmaceutical Quality System
3 source controls mapped|3 target controls covered
1%
UK Gambling Commission - Cyber Resilience Requirements
3 source controls mapped|2 target controls covered
1%
PIC/S Guide to Good Manufacturing Practice for Medicinal Products
3 source controls mapped|3 target controls covered
1%
NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity
3 source controls mapped|5 target controls covered
1%
NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security
3 source controls mapped|3 target controls covered
1%
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)
3 source controls mapped|3 target controls covered
1%
French Sapin II Law (Law No. 2016-1691)
3 source controls mapped|2 target controls covered
1%
ISO 27018
3 source controls mapped|3 target controls covered
1%
ISO 20400:2017 - Sustainable Procurement
3 source controls mapped|5 target controls covered
1%
NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices
3 source controls mapped|4 target controls covered
1%
ISO 27017
3 source controls mapped|3 target controls covered
1%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
3 source controls mapped|5 target controls covered
1%
ISO 28001:2007 Supply Chain Security Management
3 source controls mapped|3 target controls covered
1%
ISO 26262:2018 - Functional Safety for Road Vehicles
3 source controls mapped|2 target controls covered
1%
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
3 source controls mapped|2 target controls covered
1%
ISO/IEC 27011:2024
3 source controls mapped|3 target controls covered
1%
ISO/IEC 27003:2017
3 source controls mapped|3 target controls covered
1%
ISO 41001:2018 - Facility Management Systems
3 source controls mapped|3 target controls covered
1%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
3 source controls mapped|2 target controls covered
1%
IEC 62304:2015 Medical Device Software Lifecycle Processes
3 source controls mapped|5 target controls covered
1%
ISO/IEC 27400:2022
3 source controls mapped|2 target controls covered
1%
FFIEC IT Examination Handbook
3 source controls mapped|2 target controls covered
1%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
3 source controls mapped|2 target controls covered
1%
NIST SP 800-190
3 source controls mapped|3 target controls covered
1%
UK Telecommunications (Security) Act 2021
3 source controls mapped|2 target controls covered
1%
PCI SSF
3 source controls mapped|2 target controls covered
1%
PCI P2PE
3 source controls mapped|2 target controls covered
1%
PCI PIN Security
3 source controls mapped|2 target controls covered
1%
UNICEF Policy Guidance on AI for Children (2021)
2 source controls mapped|2 target controls covered
1%
OECD Recommendation on Artificial Intelligence (2024 Update)
2 source controls mapped|2 target controls covered
1%
OECD AI Principles
2 source controls mapped|3 target controls covered
1%
WCAG 2.2
2 source controls mapped|1 target controls covered
1%
UK GDPR (UK General Data Protection Regulation)
2 source controls mapped|1 target controls covered
1%
Regional Comprehensive Economic Partnership (RCEP) - E-Commerce Chapter
2 source controls mapped|1 target controls covered
1%
UK Bribery Act 2010
2 source controls mapped|3 target controls covered
1%
Trinidad and Tobago Data Protection Act 2011
2 source controls mapped|3 target controls covered
1%
Tanzania Personal Data Protection Act (Draft)
2 source controls mapped|2 target controls covered
1%
SLSA
2 source controls mapped|1 target controls covered
1%
SIG (Shared Assessments)
2 source controls mapped|1 target controls covered
1%
PSD2 SCA
2 source controls mapped|1 target controls covered
1%
PTES
2 source controls mapped|1 target controls covered
1%
Philippines Cybercrime Prevention Act (RA 10175)
2 source controls mapped|1 target controls covered
1%
OWASP SAMM
2 source controls mapped|1 target controls covered
1%
OSFI B-13
2 source controls mapped|1 target controls covered
1%
OpenSSF Scorecard
2 source controls mapped|1 target controls covered
1%
Open Banking Security
2 source controls mapped|1 target controls covered
1%
O-RAN WG11 Security Specification
2 source controls mapped|3 target controls covered
1%
Notifiable Data Breaches Scheme (Australia)
2 source controls mapped|1 target controls covered
1%
NIST SP 800-92
2 source controls mapped|1 target controls covered
1%
NIST SP 800-88
2 source controls mapped|1 target controls covered
1%
NIST SP 800-63-4
2 source controls mapped|1 target controls covered
1%
NIST SP 800-61
2 source controls mapped|1 target controls covered
1%
NIST SP 800-146
2 source controls mapped|1 target controls covered
1%
NIST SP 800-145
2 source controls mapped|1 target controls covered
1%
NIST SP 800-144
2 source controls mapped|1 target controls covered
1%
NIST SP 800-137
2 source controls mapped|1 target controls covered
1%
NIST SP 800-123
2 source controls mapped|1 target controls covered
1%
NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)
2 source controls mapped|1 target controls covered
1%
Nigeria Data Protection Act 2023 (NDPA)
2 source controls mapped|3 target controls covered
1%
Nebraska Data Privacy Act
2 source controls mapped|3 target controls covered
1%
NATO STANAG 4774 (Confidentiality Metadata Labels) and STANAG 4778 (Metadata Binding)
2 source controls mapped|2 target controls covered
1%
MTCS (Singapore)
2 source controls mapped|2 target controls covered
1%
South Korea PIPA
2 source controls mapped|1 target controls covered
1%
IATA Operational Safety Audit (IOSA) Standards Manual
2 source controls mapped|1 target controls covered
1%
FTC GLBA Safeguards Rule (16 CFR Part 314)
2 source controls mapped|1 target controls covered
1%
Florida Digital Bill of Rights (FDBR)
2 source controls mapped|2 target controls covered
1%
ISO/IEC 29115:2013 - Entity Authentication Assurance Framework
2 source controls mapped|1 target controls covered
1%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
2 source controls mapped|2 target controls covered
1%
ISO/IEC 25012:2008 - Data Quality Model
2 source controls mapped|2 target controls covered
1%
IEC 60601-1 - Medical Electrical Equipment Safety
2 source controls mapped|2 target controls covered
1%
Science Based Targets Initiative (SBTi) - Net-Zero Standard
2 source controls mapped|2 target controls covered
1%
ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM)
2 source controls mapped|3 target controls covered
1%
ISO 56002
2 source controls mapped|2 target controls covered
1%
ISO/IEC 29100:2024
2 source controls mapped|3 target controls covered
1%
Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)
2 source controls mapped|2 target controls covered
1%
ISO 37000:2021 - Governance of Organizations
2 source controls mapped|3 target controls covered
1%
ISO 19011
2 source controls mapped|2 target controls covered
1%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
2 source controls mapped|1 target controls covered
1%
ISO 22320:2018
2 source controls mapped|3 target controls covered
1%
ISO/IEC 29147:2018
2 source controls mapped|2 target controls covered
1%
PCI DSS 4.0
2 source controls mapped|1 target controls covered
1%
ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary
2 source controls mapped|3 target controls covered
1%
ISO/IEC 23837 - Security Requirements for Quantum Key Distribution
2 source controls mapped|2 target controls covered
1%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
2 source controls mapped|3 target controls covered
1%
DFARS 252.204-7012 - Safeguarding Covered Defense Information
2 source controls mapped|1 target controls covered
1%
ISO/IEC 27014:2020
2 source controls mapped|2 target controls covered
1%
Barbados Data Protection Act 2019
2 source controls mapped|1 target controls covered
1%
ISO/IEC 38500:2024 - Governance of IT
2 source controls mapped|3 target controls covered
1%
Illinois Biometric Information Privacy Act (BIPA)
2 source controls mapped|1 target controls covered
1%
ISO/IEC 27004:2016
2 source controls mapped|3 target controls covered
1%
ISO/SAE 21434
2 source controls mapped|1 target controls covered
1%
ISO 8000 - Data Quality
2 source controls mapped|2 target controls covered
1%
ISO/IEC 30111:2019
2 source controls mapped|2 target controls covered
1%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
2 source controls mapped|3 target controls covered
1%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
2 source controls mapped|2 target controls covered
1%
ISO 27043
2 source controls mapped|1 target controls covered
1%
Connecticut Data Privacy Act (CTDPA)
2 source controls mapped|1 target controls covered
1%
US Foreign Corrupt Practices Act (FCPA)
2 source controls mapped|1 target controls covered
1%
ISO/IEC 27031:2011
2 source controls mapped|1 target controls covered
1%
FedRAMP High
2 source controls mapped|1 target controls covered
1%
NIST SP 800-53 Revision 5.1 HIGH
2 source controls mapped|1 target controls covered
1%
FedRAMP Moderate
2 source controls mapped|1 target controls covered
1%
NIST SP 800-53 Rev 5 MODERATE
2 source controls mapped|1 target controls covered
1%
NIST SP 800-53 Rev 5 LOW
2 source controls mapped|1 target controls covered
1%
ISO/IEC 27007:2020
2 source controls mapped|1 target controls covered
1%
Kuwait National Cybersecurity Framework
2 source controls mapped|1 target controls covered
1%
ISO/IEC 29134:2023
2 source controls mapped|1 target controls covered
1%
Azerbaijan Law on Personal Data (2010)
2 source controls mapped|1 target controls covered
1%
IEC 62351 - Power Systems Communication Security
2 source controls mapped|1 target controls covered
1%
ASIS SPC.1-2009 - Organizational Resilience Standard
2 source controls mapped|1 target controls covered
1%
ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)
2 source controls mapped|1 target controls covered
1%
IAIS Insurance Core Principles (ICPs)
2 source controls mapped|1 target controls covered
1%
COBIT 2019
2 source controls mapped|1 target controls covered
1%
AICPA Privacy Management Framework (PMF)
2 source controls mapped|2 target controls covered
1%
SOC 2
2 source controls mapped|2 target controls covered
1%
SSAE 18 - Attestation Standards (SOC Reporting)
2 source controls mapped|2 target controls covered
1%
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
2 source controls mapped|1 target controls covered
1%
Sweden Data Protection Act (Dataskyddslag, 2018:218)
2 source controls mapped|1 target controls covered
1%
SANS Incident Handler's Handbook and PICERL Methodology
2 source controls mapped|2 target controls covered
1%
US SEC Digital Assets and Crypto Regulatory Framework
2 source controls mapped|2 target controls covered
1%
Singapore Cybersecurity Act 2018
2 source controls mapped|1 target controls covered
1%
UK Open Banking Standard
2 source controls mapped|1 target controls covered
1%
NIST SP 1800-32
2 source controls mapped|5 target controls covered
1%
ISO 27019
2 source controls mapped|4 target controls covered
1%
AS9100D - Aerospace Quality Management System
2 source controls mapped|2 target controls covered
1%
IEC 62443
2 source controls mapped|4 target controls covered
1%
FBI CJIS Security Policy
2 source controls mapped|2 target controls covered
1%
NIST SP 800-53 Rev 5
2 source controls mapped|6 target controls covered
1%
API 1164
2 source controls mapped|4 target controls covered
1%
Vermont Artificial Intelligence and Consumer Data Act (AICDA)
1 source controls mapped|1 target controls covered
0%
USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
1 source controls mapped|1 target controls covered
0%
UK FCA/PRA Operational Resilience Framework
1 source controls mapped|1 target controls covered
0%
TISAX - Trusted Information Security Assessment Exchange
1 source controls mapped|3 target controls covered
0%
SA8000:2014 - Social Accountability Standard
1 source controls mapped|1 target controls covered
0%
SASB Standards
1 source controls mapped|2 target controls covered
0%
PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments
1 source controls mapped|1 target controls covered
0%
OWASP Top 10 for LLM Applications 2025
1 source controls mapped|1 target controls covered
0%
OWASP DevSecOps Maturity Model (DSOMM)
1 source controls mapped|2 target controls covered
0%
Ontario Accessibility for Ontarians with Disabilities Act (AODA) - IASR Web Standard
1 source controls mapped|1 target controls covered
0%
OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)
1 source controls mapped|1 target controls covered
0%
NIST Privacy Framework
1 source controls mapped|1 target controls covered
0%
NERC CIP
1 source controls mapped|1 target controls covered
0%
NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production
1 source controls mapped|3 target controls covered
0%
Modern Slavery Act 2018 (Australia)
1 source controls mapped|2 target controls covered
0%
IRM Enterprise Risk Management Framework (Institute of Risk Management)
1 source controls mapped|1 target controls covered
0%
IEEE 1686
1 source controls mapped|3 target controls covered
0%
ICAO Annex 17 - Aviation Security (AVSEC)
1 source controls mapped|1 target controls covered
0%
IATF 16949:2016 - Quality Management System for Automotive Production
1 source controls mapped|1 target controls covered
0%
GS1 Global Standards - Supply Chain Traceability and Data Security
1 source controls mapped|2 target controls covered
0%
GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6
1 source controls mapped|1 target controls covered
0%
German Supply Chain Due Diligence Act (LkSG)
1 source controls mapped|2 target controls covered
0%
GAMP 5 - Good Automated Manufacturing Practice
1 source controls mapped|1 target controls covered
0%
FedRAMP Rev 5
1 source controls mapped|1 target controls covered
0%
FDA Quality Management System Regulation (QMSR)
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27010:2015
1 source controls mapped|1 target controls covered
0%
SQF Code Edition 9 - Safe Quality Food
1 source controls mapped|1 target controls covered
0%
APRA CPS 230 Operational Risk Management
1 source controls mapped|2 target controls covered
0%
Solvency II
1 source controls mapped|3 target controls covered
0%
ISO/TS 22318:2021
1 source controls mapped|1 target controls covered
0%
AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence
1 source controls mapped|1 target controls covered
0%
ISO 50001:2018 - Energy Management Systems
1 source controls mapped|1 target controls covered
0%
Security of Critical Infrastructure Act 2018 (SOCI)
1 source controls mapped|1 target controls covered
0%
Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process
1 source controls mapped|3 target controls covered
0%
Authorised Economic Operator (AEO) Programmes - Global Standards
1 source controls mapped|3 target controls covered
0%
UK Security and Emergency Measures Direction (SEMD) - Water Industry
1 source controls mapped|1 target controls covered
0%
Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct
1 source controls mapped|1 target controls covered
0%
Protective Security Policy Framework (PSPF) Release 2024
1 source controls mapped|1 target controls covered
0%
Space ISAC (Information Sharing and Analysis Center) - Threat Framework
1 source controls mapped|1 target controls covered
0%
BREEAM - Building Research Establishment Environmental Assessment Method
1 source controls mapped|1 target controls covered
0%
Sigstore - Software Artifact Signing and Verification
1 source controls mapped|1 target controls covered
0%
ISO/TS 22317:2021
1 source controls mapped|1 target controls covered
0%
ISO 26000:2010
1 source controls mapped|1 target controls covered
0%
ISO 22316
1 source controls mapped|1 target controls covered
0%
21 CFR Part 211 - Current Good Manufacturing Practice
1 source controls mapped|1 target controls covered
0%
ISO 10006:2003
1 source controls mapped|1 target controls covered
0%
ISO 27002:2022
1 source controls mapped|1 target controls covered
0%
ISO 10007:2017
1 source controls mapped|1 target controls covered
0%
FFIEC Cybersecurity Assessment Tool (CAT)
1 source controls mapped|1 target controls covered
0%
ASD Strategies to Mitigate Cyber Security Incidents
1 source controls mapped|3 target controls covered
0%
BSI IT-Grundschutz
1 source controls mapped|3 target controls covered
0%
ISO/IEC 20000-1:2018
1 source controls mapped|1 target controls covered
0%
ITIL 4
1 source controls mapped|1 target controls covered
0%
Canada ITSG-33 - IT Security Risk Management
1 source controls mapped|1 target controls covered
0%
ISO 10005:2005
1 source controls mapped|1 target controls covered
0%
Compare Automotive SPICE (ASPICE) v4.1 - Process Assessment Model with ISO/IEC 23894:2023

Coverage is not the same as your position

This page shows what Automotive SPICE (ASPICE) v4.1 - Process Assessment Model overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is Automotive SPICE (ASPICE) v4.1 - Process Assessment Model and who does it apply to?

Automotive SPICE (ASPICE) v4.1 - Process Assessment Model is a compliance framework from Global (VDA QMC; automotive OEMs and their suppliers, intacs assessment scheme) with 12 domains and 229 controls. Automotive SPICE is the VDA Quality Management Center's process reference and assessment model for automotive system, software, hardware and machine learning engineering, built on the ISO/IEC 33020 measurement framework and assessed by intacs certified assessors. Version 4.1 (released 24 August 2026) revises 4.0 (2023) by removing MLE.2 BP5 with editorial changes. The graph models the 195 base practices of the 32 processes across 11 process groups and the 34 generic practices of the nine process attributes that carry capability levels 1 to 5. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Automotive SPICE (ASPICE) v4.1 - Process Assessment Model actually require?

Automotive SPICE (ASPICE) v4.1 - Process Assessment Model has 229 controls organised across 12 domains. The largest domains are Capability levels and process attributes (PA 1.1 to PA 5.2) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model (34 controls), Supporting process group (SUP) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model (34 controls), Software engineering process group (SWE) – Automotive SPICE (ASPICE) v4.1 - Process Assessment Model (33 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Automotive SPICE (ASPICE) v4.1 - Process Assessment Model do I already cover?

Automotive SPICE (ASPICE) v4.1 - Process Assessment Model maps to 196 other compliance frameworks. The top mapping partners are ISO/IEC 23894:2023 (2% coverage), WHO Global Strategy on Digital Health 2020-2025 (2% coverage), NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement Automotive SPICE (ASPICE) v4.1 - Process Assessment Model?

Start your Automotive SPICE (ASPICE) v4.1 - Process Assessment Model compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Automotive SPICE (ASPICE) v4.1 - Process Assessment Model requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 229 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 704 frameworks.

Get Started Free →

Free forever — no credit card required